Last-minute updates for release notes.

Security: CVE-2021-3677

diff --git a/doc/src/sgml/release-13.sgml b/doc/src/sgml/release-13.sgml
index 6184269c89151c5e7b82bb7a57a550f026521770..434ddfca467e521491e2338f30b6139c10e11d0e 100644 (file)
--- a/doc/src/sgml/release-13.sgml
+++ b/doc/src/sgml/release-13.sgml
@@ -35,6 +35,30 @@
 
     
 
+     
+      Fix mis-planning of repeated application of a projection step
+      (Tom Lane)
+     
+
+     
+      The planner could create an incorrect plan in cases where two
+      ProjectionPaths were stacked on top of each other.  The only known
+      way to trigger that situation involves parallel sort operations, but
+      there may be other instances.  The result would be crashes or
+      incorrect query results.
+      Disclosure of server memory contents is also possible.
+      (CVE-2021-3677)
+     
+    
+
+    
+
-     
-      Fix mis-planning of repeated application of a projection step
-      (Tom Lane)
-     
-
-     
-      The planner could create an incorrect plan in cases where two
-      ProjectionPaths were stacked on top of each other.  The only known
-      way to trigger that situation involves parallel sort operations, but
-      there may be other instances.  The result would be crashes or
-      incorrect query results.
-     
-    
-
-    
-